Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/joshukraine/dotfiles/readme-refreshnpx skills add joshukraine/dotfiles --skill readme-refreshgit clone --depth 1 https://github.com/joshukraine/dotfilesWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/joshukraine/dotfiles/readme-refresh)<a href="https://agentmods.dev/skills/joshukraine/dotfiles/readme-refresh"><img src="https://agentmods.dev/badge/skills/joshukraine/dotfiles/readme-refresh.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00027 | $0.01917 |
| Opus 5 | $0.00014 | $0.00958 |
| Sonnet 5 | $0.00005 | $0.00383 |
| Haiku 4.5 | $0.00003 | $0.00192 |
Grade A, and why
readme-refresh scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 5d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 165 lines — stays where its author put it; the contents beside it link to each section on GitHub.
README Refresh
Audit and update the project README, or bootstrap one if it doesn't exist. The README is a living document — it evolves with the code and should always reflect the current state of the project.
Command Options
--bootstrap: Force bootstrap mode even if a README exists (useful to start fresh)
Your task
Step 0: Detect mode
- If
README.mdexists at the project root and--bootstrapwas not passed: enter Refresh mode (Step 1). - If
README.mddoes not exist or--bootstrapwas passed: enter Bootstrap mode (Step 5).
Refresh Mode
Step 1: Scan the project
Gather facts from the codebase. Do not rely on the README's current claims — verify independently.
Tech stack and versions:
- Ruby version:
.ruby-version,Gemfile.lock(RUBY VERSIONsection),.tool-versions - Rails version:
Gemfile.lock(search forrails () - Node version:
.node-version,.nvmrc,.tool-versions,package.json(engines) - Database:
config/database.yml,Gemfile.lock(pg, mysql2, sqlite3) - Key framework gems/packages: Devise, Turbo, Stimulus, Tailwind, Solid Queue, etc. — scan
Gemfileorpackage.jsonfor notable dependencies
Services and infrastructure:
- Hosting:
fly.toml(Fly.io),netlify.toml,Procfile,render.yaml,app.json(Heroku),Dockerfile,docker-compose.yml - Storage: look for Active Storage config, S3/Tigris credentials in
config/storage.yml - Email:
config/environments/production.rb(SMTP settings,action_mailerconfig), initializers for Postmark/SendGrid/etc. - Background jobs:
config/application.rbor initializers (Solid Queue, Sidekiq, etc.) - Search: Elasticsearch, Meilisearch, etc.
Available commands:
bin/directory: list executable scripts (bin/rails,bin/dev,bin/ci,bin/setup, etc.)Procfile.devorProcfile: processes defined for local developmentMakefileorTaskfile: custom task definitionspackage.jsonscripts section
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 5d ago First seen · 165 lines · 27 tokens per session scan A 772ad3802aea
readme-refresh is a skill published in the GitHub repository joshukraine/dotfiles (422 stars, last pushed 23d ago), licensed MIT. It adds 27 tokens to every session and 1,917 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
cmux-rebuild
Manage the user's durable dev sessions — zellij sessions on remote hosts (bonbon, taffy) reached over mosh, plus the local host's (trifle) own detached zellij sessions, surfaced as cmux tabs via ssh::durable / zellij::resume. Load when the user wants to rebuild/resurrect lost cmux durable surfaces after a cmux restart…
ml-paper-writing
Write publication-ready ML/AI papers for NeurIPS, ICML, ICLR, ACL, AAAI, COLM. Use when drafting papers from research repos, structuring arguments, verifying citations, or preparing camera-ready submissions. Includes LaTeX templates, reviewer guidelines, and citation verification workflows.
cmux-fork-session
Fork the current agent session — Claude Code or pi — into a new cmux split pane (or tab): opens a split beside the caller, relaunches this session forked (claude --fork-session / pi --fork), titles it 'fork: ', and keeps that title. Use when the user asks to fork/duplicate/branch the current session into a new split…
patch-stack-action
Manage patch-stack forks — setup, daily patch editing, and sync workflows. Use when a repo references DJRHails/patch-stack-action, has commits prefixed "patch-stack:", or has patch/ branches.
python-conventions
Python coding conventions, modern tooling, and project setup. Apply when writing or reviewing Python code, creating projects, writing scripts, or migrating from legacy tools. Covers uv, ruff, ty, type hints, code structure, async, testing, and project configuration.
review-pr
Review an existing GitHub PR — one verified single-pass read of the diff, inline P1–P3 findings, fixes for the P1/P2s pushed to the PR branch, scoped verification, resolved threads, a summary. Escalates to a two-reader second opinion only for large source changes. Use when asked to review and fix a PR, or to run the…